com.google.code.struts2webflow:struts2webflow-parent (1.0.4), com.google.code.struts2webflow:struts2webflow-plugin (1.0.4) +23 more potentially affected by CVE-2007-4556 via opensymphony:xwork (>=2.0.0, <=2.0.3)

opensymphony:xwork MAVEN version =2.0.0, =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.8 and more Source cves: CVE-2007-4556 Source advisory: GHSA-H7MF-QRM9-2848...

berkano:bean-displaytag (>=20050615.234814, <=20050616.015551), berkano:berkano-util (>=dev-20050722, <=20050901-2) +28 more potentially affected by CVE-2007-4556 via opensymphony:xwork (>=1.0.3, <=1.2.2)

opensymphony:xwork MAVEN version =1.0.3, =20050615.234814, =dev-20050722, =2.1.5, =1.1.3, =1.0-alpha-1, =1.1-beta-1, =1.1-beta-1, =1.0-beta-2, =1.0-beta-3 - org.codehaus.jet:jet-web-engine 1.0-beta-2 and more Source cves: CVE-2007-4556 Source advisory: OSV:GHSA-H7MF-QRM9-2848...

CVE-2007-4556

OpenSymphony XWork (used by WebWork and Apache Struts) before 1.2.3, and 2.x before 2.0.4, evaluates inputs as OGNL expressions when altSyntax is enabled. The underlying issue is recursive OGNL processing, which can lead to a denial of service (infinite loop) and, in some cases, remote code execu...